Lucene search

K
osvGoogleOSV:GHSA-WQ4R-8342-JMC9
HistoryMar 29, 2021 - 8:24 p.m.

SQL injection in vhs (aka VHS: Fluid ViewHelpers)

2021-03-2920:24:44
Google
osv.dev
13
vhs extension
sql injection
islanguageviewhelper
typo3

EPSS

0.001

Percentile

49.5%

The vhs (aka VHS: Fluid ViewHelpers) extension before 5.1.1 for TYPO3 allows SQL injection via isLanguageViewHelper.

EPSS

0.001

Percentile

49.5%